Privacy and Cookie Notice
1. Our commitment to privacy
Your privacy is very important to us at Umicore and its affiliates, hereinafter also "we" and/or "us" and/or "Umicore"). To better protect your privacy we provide this notice ("Privacy Notice") explaining our information practices and the choices you can make about the way your information is collected and used. To make this notice easy to find, we make it available on our homepage and at every point where personal data may be requested.
1.1 We strongly urge you read this notice and make sure you fully understand our practices in relation to personal data, before you access or use any of our services. If you read and fully understand this Privacy Notice, but remain opposed to our practices, you must immediately leave our website, and avoid or discontinue all use of any of our services. Where you have read this notice but would like further clarification, please contact us at email@example.com.
2. Important information
2.1 The purpose of this Privacy Notice is to provide you with clear explanation of what personal data we collect, when, why and how we collect, use and share your personal data and it explains your statutory rights. This Privacy Notice is not intended to override the terms of any contract you have with us, nor any rights you might have under applicable data privacy laws.
2.2 This Privacy Notice covers online and offline processing activities. We may collect personal data from you offline when you attend one of our events, a trade show, when you contact us by telephone or online when you visit our website, when you subscribe to our newsletter, etc.
2.3 Protecting the privacy of the very young is especially important. For that reason, we never collect or maintain information on our website or offline from those we actually know are under 13, and no part of our website is structured to attract anyone under 13. Parents and guardians should supervise their children's activities at all times. If we learn we have collected or received personal data from a person under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a person under 13, please contact us at firstname.lastname@example.org.
2.4 Note that our website contains links to third party websites which we are not responsible for. Please review the privacy policies of such third party websites should you visit these websites. This Privacy Notice does not address the privacy or information practices of any third parties.
3. What information do we collect and how do we collect it?
3.1.1 If you register or contact us as an individual, we may collect your name, email address, telephone number, address information (together, "identification data"), information about the device you use to access our website or online services ("device data).; or
3.1.2 If you register or contact us on behalf of a company, we will collect company identification data, identification data from the company representative, company composition and consumption data, device data, payment data and login data.
3.3 If you apply to one of our open positions published in our careers site, by sending us contact details and CV ("applicants personal data") via the relevant application on our website, or through any other means provided by us (e.g. social media), we will collect such applicants' personal data in order to process your application.
3.4 If you access our premises, you may be subject to monitoring by our video surveillance systems. These devices may capture images and video footage of you which we may process and store in accordance with local laws.
4. How do we use your personal data?
4.1 For internal business purposes such as:
4.1.1 to improve our services in order to make them fit for our customers' needs and to draw insights in relation to possible improvements;
4.1.2 to improve our services to you and customize your browsing experience. Some of the information (particularly the information collected by cookies and other tracking technology) helps us improve our website; and
4.1.3 to track any fraudulent activities and other inappropriate activities and monitor content integrity on our website.
4.1.4 monitor the use of the Website;
4.1.5 improve the functionality of the Website;
4.1.6 implement security measures associated with the Website;
4.1.7 facilitate the general administration of the Website.
4.2 To process job applications
We collect applicants personal data solely for Umicore's internal recruitment purposes including for: identifying applicants, evaluating their applications, making hiring and employment decisions, and contacting applicants by phone or in writing.
4.3 To communicate with you
We use your personal data to respond to your queries about our services.
We may also provide information related to Umicore’s services, including sales, marketing, advertising, and promotional information.
4.4 To protect our property and ensure safety at our premises.
We use our video surveillance systems to ensure safety and health, protection of company properties (against theft, burglary, vandalism, etc.), control of production processes and, if applicable, other purposes as notified to you, insofar permitted by local laws.
4.5 To enforce Umicore’s rights and defend its interests.
5. Carrying out Direct Marketing:
We may use your personal data, such as your address for direct marketing purposes. We may for example send you emails to inform you of news and updates about our services. This may be in the form of email, post, SMS, telephone or targeted online advertisements. Where required by law, we will obtain your consent prior to sending you such marketing information.
5.1 To protect your privacy and ensure you have control over the use of your personal data, we will always give you the opportunity to "opt out" of direct marketing when you contact us in relation to a product or service or you receive any email, text or other direct marketing communication.
5.2 You have a right to prevent direct marketing of any form at any time - this can be exercised by following the opt-out link attached to each communication, by changing privacy settings within your Umicore account or by sending an email to email@example.com.
5.3 Based on the information we have about you, we take steps to limit direct marketing to a reasonable and proportionate level, and to send you communications which we believe may be of interest or relevance to you, based on the information we have about you.
6. Legal basis for processing personal data:
6.1 We will only collect, use or share your personal data for the purposes set out in this Privacy Notice where we are satisfied that:
6.1.1 our use of your personal data is necessary to perform a contract or take steps to enter into a contract with you; or
6.1.2 our use of your personal data is necessary to support legitimate interests that we have as a business to provide products and services to our customers, to protect our property and to ensure safety at our premises, provided it is conducted at all times in a way that is proportionate, and that respects your privacy rights.
6.1.3 our use of your personal data is necessary to comply with a relevant legal or regulatory obligation that we have. For example, to maintain appropriate business records, to comply with lawful requests by public authorities and to comply with applicable laws and regulations or as otherwise required by law; or
6.1.4 you have provided your consent to us using your personal data for that purpose (eg where you provide us with marketing consents or opt in to additional services).
Where the basis of processing is your consent, you have the right to withdraw your consent, and therefore prevent that processing, at any time.
7. How we protect and store your personal data
7.1 Data Security
7.1.1 Umicore understands the importance of your personal information and provides reasonable administrative, technical, and physical security controls to protect Personal Data. These controls are designed to maintain the confidentiality of Personal Data and protect it from unauthorized access, improper use, and accidental loss. However, you acknowledge and agree that: (i) in general, the transmission of information over the internet is never completely secure, private, or confidential; and (ii) any information that is sent to or received by the Website may be intercepted, decrypted, consulted, and used by third parties, even if the exchange of such information is encrypted.
7.2 Data Retention
7.2.1 We will retain your personal information only for as long as necessary to fulfil the purpose(s) for which it was collected and to comply with applicable laws.
7.2.2 In general, this means that we store your personal information for as long as is required to deliver our services, except where we have a lawful basis for saving it for an extended period of time. We also retain the personal information we need for the execution of pending tasks, to exercise our legal rights and our claims. Please note that we may be obliged to store certain data for a legal mandatory period of time. When certain personal information is only saved due to a legally mandatory preservation term, the processing of it by us is limited.
7.2.3 We may store personal data that is necessary to provide the services, to comply with legal obligations (e.g. in relation to invoice retention) or to satisfy our legitimate interests (e.g. for dispute resolution or for handling complaints).
8. We may share your personal data
Umicore may share your personal data with third parties (or otherwise allow them access to it) only in the following manners and instances:
8.1 to other Umicore affiliates for the purposes mentioned in this Privacy Notice; and
8.2 with any third parties to whom the relevant Umicore entity subcontracts all or part of this processing. The purpose of this transfer will be to help manage our business and deliver services. For instance, we may transfer your personal data to a service provider to the extent necessary to provide our services. Other instances may include transfers to e-marketing service providers, hosting providers and any other relevant roles. Note that we will never sell your personal data to a third party. These third parties have agreed to confidentiality restrictions and use any personal data we share with them or which they collect on our behalf solely for the purpose of providing the contracted service to us.
8.3 where permitted by local data protection laws, Umicore may disclose or otherwise allow others access to your personal data pursuant to a legal request, such as a subpoena, legal proceedings, search warrant or court order, or in compliance with applicable laws, if we have a good faith belief that the law requires us to do so, with or without notice to you. If warranted, we may also allow access to this information in special emergencies where physical safety is at risk.
8.4 we may disclose any personal data or other information obtained from or about you, to third parties in connection with a merger, acquisition, bankruptcy or sale of all or substantially all of our assets, to the extent that this is necessary for the process.
9. Transferring personal data globally
9.1 Your personal data may be transferred and stored outside your place of residence, that are subject to different standards of data protection. In particular, if you live in the EEA / UK, you should be aware that your personal data may be shared with, and transferred to, Umicore affiliates and third-party service providers who are located outside the EEA / UK. We will take appropriate steps to ensure that transfers of personal data are in accordance with applicable law and carefully managed to protect your privacy rights and interests and transfers are limited to countries which are recognised as providing an adequate level of legal protection or where we, subject to an appropriate (risk) assessment, can be satisfied that alternative arrangements are in place to protect your privacy rights. To this end:
9.1.1 we will ensure that transfers within Umicore and its affiliates will be covered by an agreement entered into by members of Umicore Group (an intra-group agreement) which contractually obliges each member to ensure that personal data receives an adequate and consistent level of protection wherever it is transferred within the Group;
9.1.2 where we transfer your personal data outside Umicore or to third parties who help provide our products and services, we will obtain contractual commitments from them to protect your personal data, in particular, for transfers of personal data outside the EEA / UK, for example, by putting in place standard contractual clauses of the European Commission (or for the UK, if applicable, as adopted by the relevant UK authorities).
9.1.3 where we receive requests for information from law enforcement or regulators, we will carefully validate these requests before personal data is disclosed.
9.1.4 where we transfer your personal to countries outside of the EEA / UK that are not covered by an adequacy decision, we will perform appropriate assessments of the laws in these countries where required.
You have a right to contact us for more information about the safeguards we have put in place (including a copy of relevant contractual commitments) to ensure the adequate protection of your personal data when this is transferred as mentioned above.
10. Applicants personal data
10.1 We will only request information which is reasonably necessary for the identification and evaluation of potential candidates for open positions such as but not limited to: name, address, telephone, e-mail, academic background, previous employers, etc.
10.2 Information submitted will be used to identify and evaluate potential candidates for positions at Umicore.
10.3 Umicore will only retain applicants personal data in accordance with the applicable laws.
10.4 We may retain applicants personal data from unsuccessful candidates to re-consider applicants for other positions and opportunities at Umicore; so we could use their information as reference for future applications submitted by them; and in case the applicant is hired, for additional employment and business purposes related to his/her work at Umicore. If you previously submitted applicants personal data to Umicore, and now wish to access it, update it or have it deleted from Umicore's systems, please contact us at firstname.lastname@example.org.
11.1 Umicore uses certain monitoring and tracking technologies (such as cookies, beacons, pixels, tags and scripts). These technologies are used in order to maintain, provide and improve our services on an ongoing basis, and in order to provide our customers with a better experience. For example, thanks to these technologies, we are able to maintain and keep track of our customers' preferences and authenticated sessions, to better secure our services, to identify technical issues, user trends and effectiveness of campaigns, and to monitor and improve the overall performance of our services.
11.2 Please note that third party services placing cookies or utilizing other tracking technologies through our services may have their own policies regarding how they collect and store information. Such practices are not covered by our Privacy Notice and we do not have any control over them.
11.4 We use the following cookies on our website:
11.4.1 Necessary cookies
These cookies are essential for you to browse the website and use its features, such as accessing secure areas of the site. Cookies that allow web shops to hold your items in your cart while you are shopping online are an example of strictly necessary cookies. These cookies will generally be first-party session cookies. While it is not required to obtain consent for these cookies, what they do and why they are necessary should be explained to the user.
Also known as “functionality cookies,” these cookies allow a website to remember choices you have made in the past, like what language you prefer, what region you would like weather reports for, or what your user name and password are so you can automatically log in.
Also known as “performance cookies,” these cookies collect information about how you use a website, like which pages you visited and which links you clicked on. None of this information can be used to identify you. It is all aggregated and, therefore, anonymized. Their sole purpose is to improve website functions. This includes cookies from third-party analytics services as long as the cookies are for the exclusive use of the owner of the website visited.
These cookies track your online activity to help advertisers deliver more relevant advertising or to limit how many times you see an ad. These cookies can share that information with other organizations or advertisers. These are persistent cookies and almost always of third-party provenance.
Update your preferences
11.5 All of the cookies are managed by third parties, and you may refer to the third parties' own website privacy notifications for further information. In particular, we use Google Analytics, which allow us to assess how you and other web users use our website, and this information is essential in helping us to continuously improve our website's functionality. They will be preserved for a maximum period of one year. The information generated by these cookies about your use of our website (including your IP address) will be transmitted to and stored by Google Inc. on servers in the United States.
11.6 At all times you can view and change your cookie settings by clicking on the link ‘Cookie Settings’ at the bottom of this page.
11.8 Cookies can be stored for different periods of time depending on the purpose for which they are processed by Umicore, or by third party companies, in compliance with the applicable privacy laws. The temporary first session cookies are active for the whole duration of the session; the permanent first session cookies have a validity period of up to 24 months, whereas for third party’s cookies the retention period is indicated by the third parties in the relative websites, accessible through the dedicated links in the table and/or by consulting the websites www.youronlinechoices.com and www.aboutcookies.org.
12. Your rights in relation to your personal data
12.1 Subject to paragraph 12.2, certain exemptions, and in some cases dependent upon the processing activity we are undertaking, you have the following rights in this paragraph:
12.1.1 to request that we provide you with a copy of your personal data that we hold and you have the right to be informed of; (a) the source of your personal data; (b) the purposes, legal basis and methods of processing; (c) the data controller's identity; and (d) the entities or categories of entity to whom your personal data may be transferred;
12.1.2 to request that we cease processing your personal data, in whole or in part, as you direct us, for any purpose, save to the extent it is lawful to do so without consent;
12.1.3 to request that we restrict the processing of your personal data where: (a) the accuracy of the personal data is contested; (b) the processing is unlawful but you object to the erasure of the personal data; (c) we no longer require the personal data for the purposes for which it was collected, but it is required for the establishment, exercise or defence of a legal claim;
12.1.4 to request that we erase your personal data in limited circumstances where it is no longer necessary in relation to the purpose(s) for which it was collected or processed;
12.1.5 to challenge processing which we have justified on the basis of a legitimate interest;
12.1.6 to request that we not transfer your personal data to unaffiliated third parties for the purposes of direct marketing or any other purposes;
12.1.7 to request that we change the manner in which we contact you for marketing purposes;
12.1.8 to request that we correct any errors in your personal data;
12.1.9 to request that we update your personal data as required. Note that you may also correct, update or remove certain parts of such personal data by yourself, or completely deactivate your Umicore account, through your account settings;
12.1.10 to obtain a copy of the safeguards under which your personal data is transferred outside the EEA / UK; and
12.1.11 to lodge a complaint with your local supervisory authority for data protection.
12.2 We may ask you for additional information to confirm your identity and for security purposes, before disclosing the personal data requested to you. We reserve the right to charge a fee where permitted by law, for instance if your request is manifestly unfounded or excessive.
13. For California users only
13.1 California Civil Code Section 1798.83 requires certain businesses to disclose, upon written request: (i) a list of the kinds of personal information that the business has disclosed to third parties for direct marketing purposes during the preceding calendar year; and (ii) the names and addresses of all of the third parties that received personal information from the business for direct marketing purposes during that year. Businesses must respond to such requests within thirty (30) days, but they are only obligated to respond to one request from each customer per calendar year.
13.2 If you live in California, you may request this disclosure by sending an e-mail request to email@example.com, providing your name, postal address, and e-mail address. You must also specifically indicate the nature of your request by including the following language or language substantially similar to it: “I request that you send me your third-party information sharing disclosures as required by California Civil Code Section 1798.83.”.
14. For South Africa users only
Protection of personal information
We understand that you would like to contact the Information Officer about a Protection of Personal Information (POPI) or a Promotion of Access to Information Act (PAIA) matter.
You can find the necessary information in these documents:
15. Changes to this Privacy Notice
We may update and change this privacy statement from time to time, to keep it up to date with legal requirements and the way we operate our business. Please regularly check these pages for the latest version of this Privacy Notice.
16. Contact information
16.1 If you have any questions about this Privacy Notice or wish to exercise any of your rights as described in paragraph 11, you can contact Umicore’s Data Protection manager via firstname.lastname@example.org.
We will attempt to resolve any complaints regarding the use of your Personal data in accordance with this Privacy Notice.
16.2 For EEA Member State or UK residents, you also have a right to lodge a complaint with your national data protection supervisory authority at any time. However, we encourage you to first contact us.
Notice last updated : June 28, 2021